Privacy Policy for rune88 — Protecting Your Personal Data

This Privacy Policy ("Policy") describes how rune88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register for and use the rune88 online casino and sports betting platform, accessible at https://rune88.app.

rune88 is committed to handling personal data with integrity, transparency, and in strict accordance with applicable data protection principles. This Policy applies to all personal data collected through the rune88 website, mobile-optimised site, customer support communications, and any associated services.

By creating a rune88 account or otherwise accessing the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. This Policy should be read alongside the rune88 Terms & Conditions and Responsible Gaming Policy.

rune88 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data collected and their primary sources:

rune88 does not collect sensitive personal data such as biometric data (beyond standard liveness checks for identity verification), health information, political opinions, or religious beliefs. Where liveness check images are collected for KYC purposes, they are processed solely for identity verification and are not retained beyond the verification event.

rune88 uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your rune88 player account, including authentication, account recovery, and personalisation of your platform experience.
• Identity & Age Verification: To verify that you are at least 18 years of age and that your identity matches the information provided during registration, as required by responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), and to maintain an accurate record of all financial transactions on your account.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This includes automated transaction monitoring and, where necessary, sharing data with relevant law enforcement or regulatory bodies.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via email and live chat.
• Responsible Gaming: To monitor for signs of problem gambling behaviour, enforce self-exclusion requests, and apply deposit limits or cooling-off periods where requested or required.
• Platform Improvement: To analyse anonymised and aggregated usage data to identify performance issues, improve game recommendations, and enhance the overall player experience.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including responding to lawful requests from courts, regulatory authorities, or law enforcement agencies in Bangladesh or internationally.
• Marketing Communications: With your explicit consent, to send you personalised promotional offers, bonus notifications, and news about new games or features at rune88. You may withdraw this consent at any time by updating your marketing preferences in your account settings.

rune88 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and rune88 — specifically, to operate your account, process transactions, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is required for rune88 to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing is necessary for rune88's legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, rune88 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the legality of processing conducted prior to withdrawal.

rune88 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners) solely to process your deposits and withdrawals. These providers are bound by their own strict data protection obligations.
• Identity Verification Services: Identity and verification data may be shared with third-party KYC service providers who assist rune88 in confirming your identity and age. These providers process your data under strict contractual data processing agreements.
• Game Providers: Technical and usage data (such as session tokens and game round IDs) is shared with game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe to facilitate gameplay. These providers do not receive your full identity or financial data.
• Fraud & AML Agencies: In cases of suspected fraud, money laundering, or other financial crime, rune88 may share relevant data with fraud prevention agencies, banking partners, and law enforcement authorities as required by law.
• Legal & Regulatory Authorities: rune88 will disclose personal data to courts, regulatory bodies, or government authorities in Bangladesh or internationally when legally compelled to do so by a valid court order, subpoena, or regulatory direction.
• Business Transfers: In the event that rune88 undergoes a merger, acquisition, or sale of assets, player personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy. Players will be notified of any such transfer in advance.

rune88 uses cookies and similar tracking technologies on the platform to deliver a functional and personalised experience. The following categories of cookies are used:

rune88 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You can manage your cookie preferences through your browser settings at any time, though disabling strictly necessary cookies will affect your ability to log in and use the platform.

rune88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration that your account remains active on the rune88 platform, plus a minimum of two years after account closure to resolve any outstanding disputes or legal claims.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, as required for AML and financial record-keeping compliance.
• KYC & Identity Documents: Retained for the period your account is active plus five years after closure, or longer if required by a specific legal obligation.
• Customer Support Communications: Retained for three years from the date of the last interaction, after which they are securely deleted.
• Marketing Consent Records: Retained from the date you gave consent until you withdraw it, plus one year thereafter for audit purposes.
• Anonymised Analytics Data: Anonymised data (which cannot be used to identify you) may be retained indefinitely for statistical analysis and platform improvement.

When your personal data is no longer required, rune88 will securely delete or anonymise it in accordance with our internal data disposal procedures.

rune88 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the rune88 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using rune88.
• Encrypted Data Storage: Sensitive personal data, including financial records and identity documents, is stored in encrypted form on rune88's secure servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. rune88 staff may only access data that is necessary for their specific role, and all access events are logged.
• Two-Factor Authentication (2FA): rune88 offers 2FA for all player accounts. We strongly encourage all players to enable 2FA in their account security settings.
• Regular Security Audits: rune88 conducts periodic internal and third-party security reviews to identify and remediate potential vulnerabilities in the platform's infrastructure.
• Incident Response Plan: In the event of a data breach, rune88 maintains a documented incident response plan. Affected players will be notified promptly if their personal data is involved in a breach that poses a significant risk to their rights or freedoms.

As a rune88 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the rune88 support team in writing at support at rune88.app. rune88 will acknowledge your request within 48 hours and respond substantively within 14 business days.

• Right of Access: You have the right to request a copy of all personal data rune88 holds about you, along with information about how it is used and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, rune88 may be required to retain certain financial records for AML compliance.
• Right to Restrict Processing: You have the right to request that rune88 limits the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to its use.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to rune88 in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to rune88's processing of your personal data where such processing is based on legitimate interests, including objecting to profiling for personalisation purposes.
• Right to Withdraw Consent: Where rune88 processes your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

rune88 is strictly an adult platform. We do not knowingly collect personal data from, or provide services to, individuals under the age of 18. If rune88 becomes aware — whether through age verification checks, account monitoring, or a report from a third party — that a registered account is operated by a person under 18, we will:

• Immediately suspend the account pending investigation.
• Delete or anonymise all personal data associated with the underage account as soon as it is no longer needed for the investigation.
• Void all bets, winnings, and bonuses associated with the account.
• Return any genuine deposits (net of any bonuses received) to the original payment source.

If you are a parent or guardian and believe that a minor in your care has registered a rune88 account, please contact us immediately at support at rune88.app. We will investigate and act promptly.

The rune88 platform may contain references to third-party game studios and payment providers whose services are integrated into the platform. These third parties operate under their own privacy policies, which are independent of this Policy. rune88 is not responsible for the privacy practices of third-party game providers or payment processors.

Where rune88 integrates third-party services (such as game iframes from Evolution Gaming or Pragmatic Play), those providers may collect certain technical data (such as session tokens or device fingerprints) directly within the game environment. This data collection is governed by the respective provider's privacy policy and is used solely to facilitate gameplay and prevent cheating.

rune88 does not embed third-party social media widgets, advertising networks, or analytics platforms that would track your behaviour across other websites. Your browsing activity on rune88 remains entirely within the rune88 ecosystem.

rune88 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes — those that significantly affect how we collect, use, or share your personal data — we will notify registered players via the email address on file at least 14 days before the changes take effect.

The updated Policy will be published on this page with a revised effective date prominently displayed. We encourage you to review this page periodically to stay informed about how rune88 protects your personal information. Your continued use of the rune88 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rune88 handles your personal data, please contact us using the details below:

• Email: support at rune88.app (plain text — not a clickable link)
• Website: https://rune88.app
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

rune88 will acknowledge all privacy-related correspondence within 48 hours and will aim to provide a full written response within 14 business days. For data rights requests (access, rectification, erasure, portability), please include your account username and a brief description of your request to help us respond as efficiently as possible.